apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization

# Base resources (includes security policies)
resources:
  - ../base
  - infrastructure.yaml
  - storage-class.yaml
  - configs/gateway-config.yaml
  - gateway-health-ingress.yaml
  - sandbox-config.yaml

# Dev-specific patches
patches:
  # Reduced resource quotas for minikube
  - path: sandbox-quotas-patch.yaml
  # Allow local registry images
  - path: admission-policy-patch.yaml
  # Web environment variables for dev
  - path: web-dev-patch.yaml
  # Web ingress for dev (no TLS, dexorder.local)
  - path: web-ingress-patch.yaml
  # Gateway dev overrides (use local image)
  - path: gateway-dev-patch.yaml
  # Gateway ingress for dev (no TLS, dexorder.local)
  - path: gateway-ingress-patch.yaml

# ConfigMaps for service configs
configMapGenerator:
  - name: relay-config
    files:
      - config.yaml=configs/relay-config.yaml
  - name: ingestor-config
    files:
      - config.yaml=configs/ingestor-config.yaml
  - name: flink-config
    files:
      - config.yaml=configs/flink-config.yaml

# Secrets (managed via kubectl, not committed)
# These are created by bin/secret-update
secretGenerator: []

generatorOptions:
  disableNameSuffixHash: true
